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Abstract 

This paper studies multiple-proof quantum Merlin- Arthur (QMA) proof systems in the setting 
when the completeness-soundness gap is small. Small means that we only lower-bound the gap 
with an inverse-exponential function of the input length, or with an even smaller function. Using 
the protocol of Blier and Tapp |BT09], we show that in this case the proof system has the same 
expressive power as non-deterministic exponential time (NEXP). Since single-proof QMA proof 
systems, with the same bound on the gap, have expressive power at most exponential time (EXP), 
we get a separation between single and multi-prover proof systems in the 'small-gap setting', under 
the assumption that EXP 7^ NEXP. This implies, among others, the nonexistence of certain operators 
called disentanglers (defined by Aaronson et al. I AB D + 09l ), with good approximation parameters. 

We also show that in this setting the proof system has the same expressive power if we restrict 
the verifier to be able to perform only Bell-measurements, i.e., using a BellQMA verifier. This is not 
known to hold in the usual setting, when the gap is bounded by an inverse-polynomial function of 
the input length. To show this we use the protocol of Chen and Drucker ICDlOi The only caveat 
here is that we need at least a linear amount of proofs to achieve the power of NEXP, while in the 
previous setting two proofs were enough. 

We also study the case when the proof-lengths are only logarithmic in the input length and ob- 
serve that in some cases the expressive power decreases. However, we show that it doesn't decrease 
further if we make the proof lengths to be even shorter. 

1 Introduction 

Arthur-Merlin games and the class MA was defined by Babai [Bab85] as natural extension of the class 
NP using randomization. In the definition of MA the prover (Merlin) gives a polynomial length 'proof 
to the verifier (Arthur), who then performs a polynomial- time randomized computation and has to decide 
if an input x is in a language or not. The verifier is allowed to make some error in the decision, hence 
making the class MA possibly more powerful than NP. If we add communication to the model, i.e., 
the prover and the verifier can exchange a polynomial number of messages then we get the class I P 
HGMR89H Q The classes IP and MA has been extensively studied and it is known that in both cases 
we can make the protocol to have one-sided, exponentially small error without hurting the power of the 
proof system. I.e., the verifier only makes an error if the input is not in the language, and even in this case 
the error probability is at most an inverse-exponential function of the input length. Surprisingly, it turned 
out that IP is equal to the class of problems decidable in polynomial space (PS PACE) [LFKN92l lSha92ll . 
For more information on these classes see e.g., the book of Arora and Barak [AB09]. 

*E-mail: lattila .pereszlenyi@gmail . coml 

'Babai also defined an interactive version of MA, that can be thought of as a 'public -coin' version of IP. Later Goldwasser 
and Sipser |GS86| showed that this class has the same expressive power as IP. 
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Quantum Merlin- Arthur proof systems (and the class QMA) were introduced by Knill [Kni96], 
Kitaev [KSV02], and also by Watrous [WatOO] as a natural extension of MA and NP to the quantum 
computational setting. Similarly, quantum interactive proof systems (and the class QIP) were introduced 
by Watrous [Wat03] as a quantum analogue of IP. These classes have also been well studied and now 
it's known that the power of quantum interactive proof systems is the same as the classical ones, i.e., 
QIP = IP = PSPACE [JJUW10]. Furthermore, quantum interactive proof systems still have the same 
expressive power if we restrict the number of messages to three and have exponentially small one-sided 
error [KWOO]. The class QMA can also be made to have exponentially small error, and has natural 
complete problems HAN02I . Interestingly it's not known if we can make QMA to have one-sided errorj^] 

Several variants of QIP and QMA have also been studied. For example one can consider the 
case where some or all of the messages are short, meaning at most logarithmic in the input length 
[MW05, BSW1 1 , Perl 11 . Our focus will be more on the setting that was introduced by Ito, Kobayashi 
and Watrous [IKW10]. They studied quantum classes where the gap between the completeness and 
soundness parameter is very small. Their main result is that quantum interactive proofs with double- 
exponentially small gap is characterized by EXP (deterministic exponential time). 

Probably the most interesting generalization of QMA is by Kobayashi, Matsumoto and Yamakami 
[KMY03 ] who defined the class QMA[&]. In this setting there are k provers who send k quantum proofs 
to the verifier, and these proofs are guaranteed to be unentangled. Note that in the classical setting this 
generalization is not interesting since we can just concatenate the k proofs and treat them as one proof. 
However, in the quantum case a single prover can entangle the k proofs and no method is known to 
detect such a cheating behavior. 

Obviously the most important question is whether more provers make the class more powerful or 
not. In a later version of their paper, Kobayashi et al. [KMY03 ] (and independently Aaronson et al. 
llABD+091 ') showed that QMA[2] = QMA[£] for all polynomially-bounded k if and only if QMA[2] can 
be amplified to exponentially small error. Later Harrow and Montanaro [HM10] showed that the above 
equality indeed holds. The question now is whether QMA is equal to QMA[2], or in other words, does 
unentanglement actually help? There are signs that show that the above two classes are probably not 
equal. For example, Liu, Christandl, and Verstraete BLCV07H found a problem that has a QMA [2] proof 
system, but not known to belong to QMA. Blier and Tapp [BT09] showed that all problems in NP have 
a QMA[2] proof system where the length of both proofs are logarithmic in the input length. On the other 
hand, if QMA has one logarithmic-length proof then it has the same expressive power as BQP [M W051 . 
Since BQP is not believed to contain NP, QMA [2] with logarithmic length proofs is probably more 
powerful than QMA with a logarithmic proof. The above proof system had some inverse -polynomial 
gap, and this gap was later improved by several papers [B eilOllCFlUIGNNlll . However, in all of these 
improvements the gap is still an inverse-polynomial function of the input lengthj^] Another evidence is 
by Aaronson et al. |ABD + Q9l who found a QMA 0{\fn) proof system for 3 Sat with constant gap 

and where each proof consist of 0(log?i) qubits. Again, it seems unlikely that 3 Sat has a proof system 
with one 0{^Jn) -length proof. 



1.1 Our Contribution 

We study multiple-proof QMA proof systems in the setting where the completeness-soundness gap is 
exponentially small or even smaller. We examine three variants of these proof systems as described 
below. 

2 In a recent paper, Jordan et al. IJKNN111 showed that the proof system can achieve perfect completeness if the prover's 
message is classical. 

3 It is no t believed that the gap in this setting can be improved to a constant because it would imply that QMA[2] = NEXP. 
lABD+091 



2 



1.1.1 QMA[&] with Small Gap 



The first variant we look at is the small-gap version of QMA[&] mentioned above. We show that this 
class is exactly characterized by NEXP if the number of proofs are between 2 and poly(n), and the 
completeness-soundness gap is between exponentially or double-exponentially small. The power of the 
proof system is still NEXP if we require it to have one-sided error. More precisely we show the following 
theorem. 

Theorem 1.1. NEXP = QMA (poly, 2,1, 1-Q(4~*)) = \J QMA(poly,poly,c,j), where c(n) 

0<i<c<l, 
c—s>2 

and s(n) can be calculated in time at most exponential in n on a classical computer. 

In the notation above the first parameter of QMA is the upper-bound on the length of each proofs the 
verifier receives, in qubits. The second parameter denotes the number of unentangled proofs, while the 
third is the completeness and the fourth is the soundness parameter. For a precise definition of the above 
notation see Section|2] Note that in Theorem [T7T] the NEXP upper-bound is trivial, as it follows from ex- 
actly the same argument that shows the NEXP upper-bound to the 'normal-gap' QMA[2]. Interestingly, 
there is no other upper-bound known for QMA [2], and it is a big open question to strengthen this bound 
|ABD + 09l . The surprising phenomenon is that if we relax the bound on the gap, then the expressive 
power of the class jumps all the way up to the trivial upper-bound. Note that an EXP upper-bound for 
the small-gap, single-prover QMA is easily seen, so we have a separation between QMA and QMA[&] in 
the small-gap setting. For more discussion about this and other consequences see Section [5] 

The non-trivial part of the proof is proving the NEXP lower-bound. For this we use the protocol 
of Blier and Tapp MBT09I on a NEXP-complete language which we call SUCCINCT3COL, the succinct 
version of graph 3-coloring. The proof of Theorem [TTT] is presented in Section|3] 

1.1.2 BellQMA[£] with Small Gap 

The class BellQMA[&] was defined by Aaronson et al. ||ABD + 09t , Brandao fBa08ll . and Chen and 
Drucker BCD 101 . The above definitions are not exactly the same, but the subtle difference doesn't matter 
in either of the above papers, neither it does in this paper. The exact definition of the class can be found 
in Section [2] Roughly, the difference between QMA[&] and BellQM A [&] is that in the latter the veri- 
fier has to measure each proof separately and non-adaptively, then based on the outcomes has to make 
its decision. Aaronson et al. ||ABD + 09t asked the question whether BellQMA[&] has the same power as 
QM A[k] and if there is a BellQM A protocol for 3S AT with similar parameters as theirs. A partial positive 
answer to the first question was given by Brandao [Ba08], who showed that BellQMA[0(l)] = QMA, 
and a positive answer to the second question was given by Chen and Drucker BCD 101 . The power of 
BellQMA[&] with super-constant k remains an open problem. 

In this paper we study the small-gap version of BellQMA[&], where again small means exponentially 
or double-exponentially small. One can observe that Brandao's proof of BellQMA[0(l)] = QMA doesn't 
go through if the gap is so smallQ So we don't know the power of BellQM A [k] with constant k in the 
small-gap setting. However, we show that if k = Q.(n) then BellQMA[&] has the same power as QMA[&], 
i.e., it also equals to NEXP. This is expressed by the following theorem. 

Theorem 1.2. NEXP = BellQMA(poly,£l(ra) ,c,s) = [j BellQMA(poly, poly, c'/), /or some c 

0<.v'<c'<l, 
c — s >2 

and s with c(n) — s(n) = £2(4~"), and where c'{n) and s'{n) can be calculated in time at most exponential 
in n on a classical computer. 

4 Aaronson et al. |ABD + 09| also defined the class LOCCQMA similarly to BellQMA but allowing the verifier to make 
adaptive and even several measurements on the same proofs. Brandao, Christandl, and Yard |BaCYll| showed that 
LOCCQMA[0(l)] = QMA. This proof also breaks down if the gap is small. 
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In the above the NEXP upper-bound is again trivial, so the only thing we need to do is give a 
BellQMA protocol for NEXP. Just as in the proof of the previous theorem, we will use the same language 
(SUCCINCT3COL) and give a proof system for that. For this we will use the protocol of Chen and 
Drucker [CD10]. Note that similarly to their original protocol we don't have perfect completeness 
either. 

Knowing that having sufficiently many provers makes BellQMA[&] as powerful as QMA[&], it would 
be very interesting to know the power of BellQMA [&] with small gap and constant k. It's either more 
powerful then BellQMA[l] = QMA, or somewhere between constant and linear number of provers there 



is an increase in the expressive power. A more detailed discussion about this can be found in Section 5.4 
and the proof of Theorem 1.2 is presented in Section[4j 



1.1.3 QMA [A:] with Small Gap and Short Proofs 

We also study the small-gap version of QMA[&] where each proof is short i.e., at most 0(log?i)-many 
qubits. One would expect that in this case the class gets weaker then NEXP. We could only show this in 
the case when the gap is inverse-exponential, which follows from a few simple observations. For the case 
when the gap is smaller than this we give a lemma that simplifies the proof system, which may help to 
prove non-trivial upper-bounds for these classes later. The lemma roughly says that instead of 0(log?i)- 
many qubits, we can consider the case when all the proof are just 1 qubits. The above mentioned results 
are described in more detail in Section 1531 



Organization of the Paper 

The remainder of the paper is organized as follows. Section [2] discusses the background theorems and 
definitions needed for the rest of the paper. Section [3] presents the proof of our first main theorem, 
Theorem [TTTJ with the last part of the proof presented in Appendix [A] In Section [4] we explain the proof 
of our other main theorem, Theorem |1.2| We end the paper with some conclusions and open problems 
in Section [5} with one last proof presented in Appendix |B| 



2 Preliminaries 

We assume familiarity with quantum information and computation 1NC00I1 : such as quantum states, uni- 
tary operators, measurements, etc. We also assume the reader is familiar with computational complexity, 
both classical liAB09H and quantum [Wat08 ]. Throughout the paper we will talk about complexity classes 
like PP, PSPACE, EXP, NEXP, BQP, PQP, QMA, and QIP. In this section we only define the classes 
that are the most relevant to our discussions, where the definition of the rest can be found in the above 
mentioned references. The purpose of this section is to present some of the notations and background 
information (definitions, theorems) required to understand the rest of the paper. 

We denote the set of functions of n that are upper-bounded by some polynomial in n by poly(n). If 
the argument is clear, we omit it and just write poly. We denote the imaginary unit by i instead of i, 
which we use as an index in summations for example. 

Definition 2.1. In the paper we use some well-known quantum gates. We define them here. 
CNOT = |00)(00| + |01)(01| + |11)(10| + |10)(11| 
H d =l f i=(|0)(0| + |0)(l| + |l)(0|-|l)(l|) 

R,( W ) d =l f cos||0)(0|-lsin||0)(l|-lsin||l)(0|+cos||l)(l| 
R Z ( W )^'|0)(0|+, [(B |1)(1| 
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Whenever we talk about quantum polynomial-time algorithms or quantum verifiers, we always mean 
polynomial-time uniformly generated quantum circuits consisting of some universal set of gates. For 
example, the gates CNOT, H, and R z (f ) form a universal set, and there are many other sets that are 
universal. Usually it doesn't matter which set we choose when we define quantum verifiers and classes 
like QMA and QIP, because it is known that each universal set can approximate any other set with 
exponential precision. However, in the following we will use error parameters that are smaller then this, 
hence the power of those classes may change with respect to what set of gates the verifier is using. In 
this paper we only assume that the verifier can perform or perfectly simulate the CNOT and the H gate, 
besides being able to perform any polynomial-time classical computation. This assumption is enough 
for all our results, so we won't bother about the gate set in the rest of the paper. 

Definition 2.2 ( HKMY03llABD + 09ll ). For functions £,k : Z+ -> N, c,s : Z+ -> (0, 1] a language L is in 
QMA(£, k,c,s) if there exist a quantum verifier V such that for all n 6 Z + and inputs x £ {0, 1}", V(x) is 
a quantum circuit generated in poly(«)-time and the following holds. 

Completeness: If x G L then there exist quantum proofs \<j>i), . . . , |fen))j where for all i, is made 
up of at most £{n) qubits, and the acceptance probability of V(x) on input ® • ■ • ® \ <Pk(n)) * s 
>c(n). 

Soundness: If x £ L then for all states |0i), . . . , |$tf n ))> where for all i, is made up of at most £{n) 
qubits, V (x) accepts with probability < s, given | (f>i ) (g> • • • (g> | fai n \ ) as its input. 

If the class is denoted by QMA(£, k,c, < s), then the probability bound in the soundness case is < s 
instead of < s. 

Remark 2.3. If we just give one parameter to QMA, then it indicates the number of provers. So the 
notation QMA[£] is defined as QMA [A:] = f QMA (poly (n) ,k, § , |). With our notation the class QMA is 
denned as Q M A = f Q M A [ 1 ] . 

Definition 2.4 ( fBa08l lABD+0911 ). The class BellQMA(£, k,c,s) is defined almost the same way as 



QMA(£, k,c,s) in Definition 2.2 except that the verifier V is not an arbitrary poly-time quantum com- 
putation. The restriction we put on the verifier is the following. V upon seeing x performs a classical 
randomized poly-time computation and produces circuits for measurements M\, Mu n \, where each 
Mi is a POVM on at most £{n) qubits. Then for all i, the verifier measures \(j>i) with Mi, and obtains 
outcome m,. After all measurements were performed, V runs a classical computation on inputs mi, ... , 
mu n \, and decides whether to accept or reject. 

Note that in the above definition the verifier has to measure each proofs separately. Moreover, non 
of the circuits of the measurements can depend on the outcome of any previous measurement. Chen 
and Drucker HCD10II defined BellQMA in a slightly different way by allowing the verifier to do quantum 
computations before and after the measurements. Our result also holds if we take their definition. The 
reason we chose the above definition is because we will prove a lower-bound for our BellQMA class, 
and so with the more restricted definition our result is slightly stronger. 



Definition 2.5. The class QCMA(c,^) is defined analogously to QMA of Definition 2.2 with the differ- 
ence that the proof must be a classical string. We will always take this string to be polynomial-length. 
Since the string is classical, it doesn't make sense to have several proofs, so we drop the parameters of 
proof lengths and number of proofs. As in the previous definitions, c is the completeness and s is the 
soundness parameter. 

Definition 2.6 (JGW83J). Let G(V,E) be an undirected graph where V = {0, 1, . . . ,m- 1} and m < 2" 
for some n. We define Cq to be a small circuit representation of G if the following hold: 
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• Cq is a circuit containing AND, OR and NOT gates. 

• Co has two inputs of n bits each. 

• Cq has poly («) gates. 

• The output of Cq is given by 

'00 ifu^ Vorv^V orw>v, 
Cg(u,v) = < 10 if u < v and (u,v) ^ E, 
11 if m < v and (m, v) 6 E. 

Definition 2.7. Let the decision problem SUCCINCT3COL be the set of small circuit representations of 
graphs that are 3-colorable. 

Theorem 2.8 ( 1PY86m . Succinct3Col is HEX? -complete. 

In the following discussion we will use the 'SWAP-test' of |BAD+97llBCWdW01L and the follow- 
ing property of this test. 

Theorem 2.9 ([BCWdWOl ]). When the SWAP-test is applied to two states | <p) and \ \\f) (with the same 
dimension), it accepts with probability A ( 1 + | (<p\ Xjf) \" 



Note that in order to perform the SWAP-test we need two Hadamard (H) gates, CNOT gates with 
the amount linear in the number of qubits |<p) and \\jf) are stored on, and we need to measure a qubit in 
the standard basis. 

Definition 2.10. We define the state \u m ) as the uniform superposition of the standard basis states, i.e., 

m— 1 
I 



i m— 1 
def 1 

r=0 



\u m ) = > |i) 
Im 



We also define the projective measurement that projects onto this state, or more formally the measure- 
ment {Po,Pi} where 

Po =' \u m )(u m \ , Pi = 1 — \u m )(u m \ . 
We say that Po (and Pi) corresponds to outcome (and 1). 

Note that the above measurement can be performed using [log/n] Hadamard gates and single-qubit 
measurements. 

3 QMA[fc] with Small Gap Equals NEXP 

This section proves Theorem |l.l[ i.e., we show that QMA[&] equals NEXP if k is at least 2 and at most 
poly(?i), and the completeness-soundness gap is bounded away by an inverse-exponential or doubly 
exponential function of n. 



The proof of this theorem is divided into Lemma 3.1 and Theorem 3.2 according to the two direc 



tions of the containment. As mentioned in the Introduction, only Theorem |3.2| is actually new. 
Lemma 3.1. [J QMA(poly, poly, c, s) C NEXP, where c(n) and s(n) can be calculated in time 



0<5<C<1, 

c— s>2 

at most exponential in n on a classical computer. 
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Proof sketch. Let L G QMA(poly, poly, c, s) with some c and s satisfying the conditions in the lemma. 
The proofs in the QMA proof system are poly-many quantum states on poly-many qubits, which are 
vectors in the complex euclidean space with exponential dimension. These vectors can be described up 
to an exponential number of bits of accuracy by a classical proof of exponential length. Given this proof 
to a NEXP machine, it can calculate the acceptance probability of the QMA verifier to an exponential 
number of bits of accuracy; and it can decide whether this probability is more then c or less then s. This 
means that L G NEXP. □ 

The other direction of the containment is formulated by the following theorem. 

Theorem 3.2. NEXP C QMA (poly, 2, 1, 1 -ft(4~")). 

We will prove this result through several lemmas. This will prove Theorem [TTT] as well. 



Proof of Theorem [777] The theorem immediately follows from Lemma [37T] Theorem |3.2| and the obser- 
vation that QMA(poly, 2, 1, 1 -0(4"")) C(J < S < C <1, QMA(poly, poly, c, 5). □ 



c— s>2 



In order to prove Theorem |3.2| we construct a QMA verifier V for the NEXP-complete language 



SUCCINCT3C0L. We use the protocol of Blier and Tapp [BT09], with similar argument as theirs. 

Let the input to SUCCINCT3C0L be denoted by C G and it's length by n = \C G \. Let V get its two 
unentangled proofs in registers Ri and R2. Both R ( 's have two parts, R ( - = N,Q, where N,- is the 'node' 
part and C, is the 'color' part. Ni and N2 have associated Hilbert space C 2 ", while Q and C2 have 
associated space C 3 . The procedure V performs is described in Algorithm [I] 



Algorithm 1 Description of verifier V in the proof of Theorem 3.2 



Input : classical circuit Co, quantum registers Ri and R2, where the state of Ri and R2 is separable 
Output : accept or reject 



9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 



With probability 1 /3 do the Equality Test (line[2]), the Consistency Test (line[8]>, or the Uniformity 
Test (line [16]). 

Equality Test. Perform the SWAP-test on Ri and R 2 . 
if the SWAP-test fails then 

return reject {The two registers are not equal.} 
else 

return accept 
end if 

Consistency Test. Measure Ni, Q, N2 and C2 in the computational basis and get v\,c\, V2 and C2- 
if (vi = V2) and (ci 7^ c-i) then 

return reject {The same vertex has two colors.} 
else if (C(vi,V2) = 11) {Assume thatv\ < V2 otherwise swap them.} and (c\ = ci) then 

return reject { Adjacent vertices have same color. } 
else 

return accept 
end if 



Uniformity Test. Measure Ni and Q separately according to the measurement of Definition 2.10 
if (the outcome on Ci is 0) and (the outcome on Ni is 1) then 

return reject {Not all nodes are present.} 
else 

return accept 
end if 
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Note that V runs in poly(n)-time, because the SWAP-test, evaluating the circuit Cg, and performing 
the measurement of Definition (2T0 for m = 2 n all can be performed in polynomial time. The following 
lemma, which is essentially the same as Theorem 2.4 of [BT09], proves completeness for V. 

Lemma 3.3 (Completeness). If Cg £ SUCCINCT3COL then there exist a pair of proofs, with which V 
will accept with probability 1. 

Proof. For i G {0, 1, . . . ,m — 1} let c(i) € {0, 1,2} be a valid coloring of the graph G, where m is the 
number of nodes. For i € {m, ... ,2" — 1} let c(i) = 0. Let the state of both Ri and R2 be 

i*>=4jeWo>. (d 



1=0 



where \i) is on the node register (N) and \c(i)) is on the color register (C). From Theorem 2.9 it follows 
that the Equality Test succeeds with probability 1. Since c is a valid 3-coloring, the Consistency Test 
succeeds with probability 1 as well. To see the same for the Uniformity Test, let us calculate the resulting 
state after measuring on Q in line 17 of Algorithm [T] Up to some normalization factor, the state is 

(i®M<» 3 i)i*) = ^= fij^ ® r£i*>) • 

This means that the state of Ni is \u2»), so the Uniformity Test always succeeds. □ 



The proof of soundness is presented in Appendix [A] on page [T5j because it closely follows the 
analysis of Blier and Tapp [ BT09 ] and of Chiesa and Forbes IICF111 , although with different parameters. 



4 BellQMA[Q(n)] with Small Gap Equals NEXP 

In this section we prove Theorem |1.2[ i.e., we show that QMA with exponentially small gap still equals 
to NEXP if we restrict the verifier to only be able to perform Bell-measurements. However, we will 
need at least Q.(n) proofs. We essentially use the algorithm of Chen and Drucker [CD10] on the succinct 
version of graph 3-coloring (SUCCINCT3COL). We also use one of their lemmas, but our proof will be 
simpler then theirs, because we don't aim for constant gap. We don't use the PCP theorem either. Note 
that in the previous section we already argued about the NEXP upper-bound on the QMA classes. The 
same argument applies here too. It's also easy to see that restricting the verifier can only make the power 



of the proof system weaker. So the only statement left to prove, in order to prove Theorem 1.2 is the 
following. 

Theorem 4.1. NEXP C BellQMA(poly(«) ,£2(n) ,c,s),for some c and s with c{n) - s{n) = Q(4~ n ). 



To prove Theorem|4~Tj we construct a BellQMA verifier V for SUCCINCT3COL which will show that 
Succinct3Col g BellQMA(poly(n),n(n),c,j). Since Succinct3Col is NEXP-complete, Theo- 
rem 4.1 will follow. Just as in the previous section, let the input to SUCCINCT3COL be denoted by 
Cq and it's length by n = \Cg\- Verifier V will receive k quantum proofs in registers Ni, Ci, . . . , N&, Q, 
where for each i G {1,2, ...,&}, the state of N,Q is separable from the rest of the registers. The registers 
N,- have associated space C 2 " and registers Q have associated space C 3 , similarly as in the previous sec- 
tion. The behavior of V is described in Algorithm [2j We split the proof of Theorem 4. 1 into Lemma 4.2 



which proves completeness for V and Lemma |43| which proves its soundness. 

Lemma 4.2 (Completeness). If Cg G SUCCINCT3COL then there exist quantum states on registers 
N 1 , C] , . . . , N*,Q, such that if they are input to V, defined by Algorithm^ then V will accept with 
probability at least 1 — 2~«>. 
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Algorithm 2 Description of verifier V in the proof of Theorem 4. 1 



14 1. 



Input : classical circuit Co, quantum registers Ni, Ci, . .. , N^, Q, where V/ G {1,2, ... ,k}, the state of 

N,Q is separable from the rest of the registers 
Output : accept or reject 

With probability ^ do the Consistency Test (line[2j) or the Uniformity Test (line 
Consistency Test, 
for all i G {1,2,..., k} do 

Measure N,- and Q in the computational basis and get v,- and c,. 
end for 

for all 1 < i < j < k do 

if (v, = Vj) and (a / cj) then 

return reject {The same vertex has two colors.} 
else if (Cc{vi,Vj) = 11) and (c, = cj) then 

return reject {Adjacent vertices have same color.} 
end if 
end for 
return accept 
Uniformity Test, 
for all i G {1,2,..., k} do 



Measure Q with the measurement of Definition 2.10 and denote the outcome by x;. 



Measure N,- with the measurement of Definition 2.10 and denote the outcome by j,-. 



end for 

LetZ = {i:xi = 0}. 
if |Z| < k/6 then 
return reject 
end if 

for all i G Z do 

if yi = 1 then 

return reject {Not all nodes are present.} 

end if 
end for 
return accept 



Proof. For all i G {1,2, ... ,k}, let the state of N,Q be \<p), where \<p) is defined by equation ([T]) on 
page [8] For exactly the same reason as in the proof of Lemma |3.3| the Consistency Test will succeed 
with probability 1. As for the Uniformity Test, note that for all i G Z, the measurement of N ; in line 17 
of Algorithm [2] yields 1 with probability 1. The argument for this is also in the proof of Lemma 3.3 



This means that given the above input, the only place where Algorithm [2] may reject is at line [21] 
i.e., when |Z| < |. So in the following we only need to upper-bound this probability. We do it similarly 



to the proof of Lemma 1 of liCDlOl. By direct calculation the probability that x, = in line 16 



is 



Pr[* ; = 0] 



(1®|m3>(m 3 |)|0) 



This means that E[|Z|] = |. Since the x,'s are independent, we can use the Chernoff bound and get that 



Pr 



k 

<6 



_ _k_ 

<e 48 < 2 40 . 



This finishes the proof of the lemma. 



□ 
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We are left to prove soundness for V. From now on let's denote the quantum input to Algorithm [2] 
by | <pi ),..., | q>k) . For each i G { 1 , 2, . . . , k}, we write 

\<Pi)= 2n £^\v)tp%\j), 

v=0 7=0 



where | v) is a state on N,-, |y) is a state on Q, furthermore L^Iq 1 
for each / and v. Similarly to the notation in [CDlTjl let 



a; 



(0 



1 for each /, and Y,j=o Pvj 



Z' = li:Pr[ Xi = 0]> 
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We need a lemma from HCD101 which we will state and use with a bit different parameters. Intu- 
itively the lemma says that in order to avoid rejection in line [2T1 we must have a constant fraction of 



registers for which, with at least a constant probability, the outcome of the measurement in line 16 is 0. 

Lemma 4.3 (Lemma 2 of BCD 101 ). If \Z'\ < k/6 and if in line^of Algorithm^the Uniformity Test is 
chosen, then the test will reject in line 21 with probability £2(1). 

We want all nodes to appear with sufficiently big amplitude in | <p,) , for each i 6 Z'. This is formalized 
by the following lemma. 

Lemma 4.4. Suppose that the Uniformity Test rejects with probability at most 200 -1 • 4~". Then Vi G Z' 
and Vv € {0, 1 , . . . , 2" — 1 } it holds that 



a;, 



> 



l 

24^2"' 



Proof. Let's pick an i £ Z', and consider the state | %) on register N,Q. Suppose that we measured on 



C, with the measurement of Definition 2.10 and denote the resulting state on N, by 



15) 



2"-l ... 

I 7v W |v> 

v=0 



Note that since i G Z', this outcome happens with probability > ^. Assume towards contradiction that 

2 

from page 



3v such that 



7v 



.(0 



< 



2-2' 



. Using Lemma 



measurement of Definition 



2.10 



A.4 



17 



we get that when we measure |^ ( ) with the 

we get outcome 1 with probability at least . But this means that 
the Uniformity Test rejects with probability at least 12 ^ 4 „ > 7n Q . 4 „ . This contradicts to the statement of 



the lemma, so it must be that 



„(0 



> j^r for all v. Lemma 



A.5 



implies that for all v, 



a; 



(0 



> 



l 



12-2-2" 



□ 



We are now ready to prove soundness for V. 

Lemma 4.5 (Soundness). If Co £ SUCCINCT3COL then V ofAlgorithm^will reject with probability at 
least 12000~ 1 -\- n . 
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Proof. Suppose that the Uniformity Test rejects with probability at most 20 q. 4 „ , as otherwise we are 

\Z'\ > I. Since I = Q.(n), we can always take k > 12 so we have \Z'\ > 2. Let's 



done. From Lemma 



4.3 



pick two elements q, r G Z'. We define two colorings ci and C2 the following way, 



ci (v) = argmax 



h'vj 



and similarly 



, ^ def 

C2(v) = argmax 



('■) 



which 



/3« 



for all v E {0, 1, ... ,2" — 1}. If the m axim um is not well defined then just choose an arbitrary j for 

the probability that we get (v,ci (v)) when we measure \(p q } 

l 



is maximal. From Lemma 

2 



4.4 



in the standard basis is at least 



a. 



I > 

3 ^ 72-2' 



^7, for all v, and the same lower-bound is true for getting 



(v,C2(v)), when measuring \ cp r ). We split the rest of the proof into two cases. 



• Suppose that the two colorings are different, i.e., 3v such that c\ (v) ^ (v). In this case in line|4] 
we get (v,ci(v)) when measuring N ? C ? and (v,C2(v)) when measuring N r C r with probability at 



> 



least (72^") 
reject in line M 



l 

6000-4" 



It means that with at least the above probability the Consistency Test will 



Suppose that the two colorings are the same, i.e., Vv : ci (v) = C2(v). Since G is not 3-colorable, 
3vi,V2 S {0, 1, ... ,2" — 1} such that (vi,V2) is an edge in G and c\ {v\) = c\ (V2), or equivalently 
Cg(vi,V2) = 11. Similarly as above, with probability at least 6nn 1 n 4 „ , we get (vi,ci(vi)) when 



measuring H q Q q and (v2,ci (V2)) when measuring N r C,- in line|4]of the algorithm. In this case the 
Consistency Test will reject with at least the above probability in line [TO 



Since in both cases the Consistency Test rejects with probability at least 60QQ 4 „ , and the test is chosen 
with probability ^, the lemma follows. □ 

Proof of Theorem Note that Algorithm [2] runs in polynomial time. Furthermore, for both the Con- 
sistency and the Uniformity Test, the algorithm starts with measuring all the quantum registers according 



4.5 



to a fixed measurement. So V is a proper B ellQM A verifier. Lemma [4T2] shows that the completeness of 

12000- 1 -2- 2n . If 

□ 



the protocol is c > 1 — 2 w , while Lemma 
k > 120« then c — s = 12 (2~ 2 ") so the theorem follows 



shows that the soundness is s < 1 



5 Conclusions and Open Problems 

In this section we discuss some of the consequences of the previous results, i.e., the consequences of 
Theorem [TTT] and 1.2 We also raise some related open problems. 



5.1 Tightness of the Soundness Analyses 

One can observe that both the QMA[2] verifier of Algorithm [I] and the BellQMA verifier of Algorit hm [2| 



A.7 



and Lemma 



4.5) 



have soundness parameter 1 — Q.(4~ n ) and gap Q.(4~ n ). (As shown by Lemma 
Note that this bound is tight up to a constant factor in case of Algorithm [T] and tight up to some low-order 
term in case of Algorithm [2j The reason for this is the same as what was observed in one of the remark 
in llCFTn . 

The argument is briefly the following. Suppose that Cq SUCCINCT3COL and that G is such, that 
there exist a coloring such that only one pair of nodes are colored inconsistently. If the prover gives 
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states of the form defined by equation ([T]) but using this coloring, then the verifier won't notice this in 
either of the Uniformity Tests nor in the Equality Test. The only place where the verifier can catch the 
prover is in the Consistency Test when it checks the colors of the nodes according to the constraints 
posed by the graph G. The prover gets caught if the verifier gets the inconsistently colored nodes in the 
measurement outputs. This happens with probability 0(2~ 2n ) in case of Algorithm fll and C?(« 2 2~ 2 ") in 
case of Algorithm [2j This means that it is possible to fool the verifier of Algorithm [l] with probability 
1 - 0(4~ n ) and to fool the verifier of Algorithm [2] with probability 1 - 0(4~"). 

5.2 Separation Between QMA and QMA[2] in the Small-Gap Setting 

As we said in the Introduction, it is a big open problem whether QMA is equal to QMA [2] or not, and 
we mentioned some evidences that suggest us that they are not equal. Here we give another evidence, 
i.e., we show that under plausible complexity-theoretic assumptions QMA[2] is strictly more powerful 
than QMA in the low-gap setting. We elaborate on this in the following. 

Theorem 1 1 . 1 1 shows that QMA [2] with exponentially or double-exponentially small gap is exactly 
characterized by NEXP. So it is natural to ask, what is the power of QMA with the same gap, or what 
upper-bounds can we give for it? In a related paper, Ito et al. HIKW10H showed that quantum interactive 
proof systems (or the class QIP) with double-exponentially small gap are exactly characterized by EXP. 
Since QIP contains QMA with the same gap, we have a separation between QMA and QMA[2] in the 
setting where the gap is exponentially or double-exponentially small, unless EXP = NEXP. Note that 
the result of Ito et al. is quite involved. But if we are only interested in the upper- bound on QMA, then 
we can give a very simple argument for it, which we state and prove in the following lemma. 

Lemma 5.1. [J QMA(poly, l,c,s) Q EXP, where c(n) andsin) can be calculated in time at most 

0<s<c<\, 

^.T_?p°iy 
c—s>2 

exponential in non a classical computer. 

Proof sketch. Letx be an input to QMA(poly, l,c,s) with c and s having the above property. The action 
of the verifier can be described by a binary-valued measurement {Pq,P[} on the proof state, where 
Pj corresponds to acceptance and PJ corresponds to rejecting. Note that the maximum acceptance 
probability of the verifier is equal to the spectral norm of P] . (Or in other words the biggest eigenvalue 
of Pj.) Since the proof is on poly-many qubits, the dimension of Pj is exponential. An EXP-machine, 
knowing x, can approximate Pj with up to an exponential amount of digits of accuracy. This is because 
the verifier is a uniform quantum circuit of polynomial size. Now the EXP-machine can approximate 
the spectral norm of Pj up to an exponential amount of bits of accuracy. □ 

5.2.1 One-Sided Error Case 

Note that the NEXP characterization of the small-gap QMA [2] proof system still holds if we restrict the 
proof system to have one-sided error. Moreover, it is not known whether QMA can be made to have 
one-sided error, so we can investigate the relation between these classes as well. Interestingly, it turns 
out that we can state an even stronger separation in this case. This is due to a result by Ito et al. IIK W10II . 

Theorem 5.2 (Theorem 11 of HIKW10R QMA(poly, 1, 1, < 1) C PSPACE. 

This means that in the one-sided error case QMA [2] with exponentially small gap is strictly more 
powerful then QMA with even unbounded gap, unless PSPACE = NEXP! 

5.3 Nonexistence of Disentanglers 

The discussions in Section |5.2| have an interesting consequence to the existence question of certain 
operators called disentanglers. They were defined by Aaronson et al. flABD + 09l . as the following. 
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Definition 5.3 (Definition 40 of lABD+091 ). Let us have a superoperator <I> : D (C N ) ->■ D (C M (g> C M ) |^ 
We say that <I> is an (e, 5) -disentangler if 

• <J>(p) is £-close to a separable state for every p, and 

• for every separable state a, there exists a p such that <I>(p) is 5-close to a. 

Note that if there exist a ( poly( i ogM) , po | y(1 1 og7V4 - ) ) -disentangler with logN = poly(logAf), and if that 
disentangler can be implemented in poly(logM)-time, then QMA = QMA[2]. So it is not believed that 
such a disentangler exist. Towards proving this, Aaronson et al. showed that no (0,0) -disentangler exists 
for any finite N and M. The discussion in the previous section implies that there exist no disentangler 
with approximation error inverse of the square of the dimension. More precisely we have the following 
corollary. 

Corollary 5.4. There exist a function f(M) = £2(M~ 2 ), such that there exist no poly(logM)-?/me im- 
plementable (f(M) , f (M)) -disentangler with logN = poly(logM), unless EXP = NEXP. 

Proof. Suppose that there exist such a disentangler <1>, for f(M) = K\ -M~ 2 , for some constant K\ to be 



specified later. Let L € NEXP. Theorem |3.2| implies that L <E QMA(poly,2, 1, 1 - K 2 -4~ n ), for some 
constant jcj and where the dimension of both proof states are 3-2". Let V be the corresponding verifier. 
We show that L G QMA(poly, l,c, s) with c — s = 0(4~") by constructing a verifier W that uses only one 
proof. By Lemma[5j]it holds that QMA(poly, l,c,s) C EXP so we get that EXP = NEXP. 

We are left to define verifier W. W fist applies <1> on its quantum proof then simulates V on the 
output of <I> and outputs whatever V outputs. Note that <1> is poly-time implementable and the size of 
the proof of W is also polynomial. To see completeness for W, note that there exist a state \ \jf) <g> \ \jf) 



with which V accepts with probability 1. From Definition 5.3 there exist a p such that <S>(p) is f(3 ■ 2" 



close to | \\f) ® | yr). Since f(3 ■ 2") = y • 4 ", the probability of acceptance of W is at least 1 — ^-4 ". 
Similarly, for the soundness of W, we have that for all separable states, V accepts with probability at 



most 1 — K2 ■ 4~". Again from Definition 5.3 for all p, <!>(p) is f(3 ■ 2")-close to a separable state. So 
the probability of acceptance of W is at most 1 — -4~" + ^ -4~". If K\ is sufficiently small then 
c — s = £2(4~"), so the corollary follows. □ 

5.4 Notes on Be 1 1 Q M A Proof Systems 



An interesting consequence of Theorem 1 1 . 1 1 and 1.2 is that in the small-gap setting, BellQMA[&] proof 



systems have the same power as QMA[&] proof systems if k is at least a linear function of the input 
length. Such a result is not known to hold in the normal-gap setting. As we mentioned before, in the 
normal-gap setting we now that if k is constant then BellQMA[&] collapses to QMA, and the proof of 
this fact doesn't generalize to the small-gap setting. This means that it is an interesting open question to 
figure out the power of BellQMA[2] with exponentially small gap. There could be two possibilities: 

• It is quite unlikely that the small-gap version of BellQMA[2] = NEXP, because it would give a 
very powerful proof system, and moreover it would show that if a verifier is restricted to Bell- 
measurements then it gains a lot of extra power if we decrease the bound on the gap; since 
BellQMA[2] = QMA if the gap is inverse-polynomial, but BellQMA[2] = QMA[2] if it is inverse- 
exponential. 

• So we conjecture that the small-gap BellQMA[2] C NEXP. But this would imply that somewhere 
between constant and linear number of provers, the power of BellQMA[&] significantly increases. 

We leave the study of this class for future work. 



5 We denote the set of all density operators on space M 1 by D(J^). 
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5.5 Error and Proof Reduction 



Note that as a side-product of our results, in both the BellQMA[&] and QMA[&] proof systems we can 
'amplify' the error from double-exponentially small gap to single-exponentially small gap. Also in the 
case of QMA[fc], we can make the proof system to have one-sided error, which up to our knowledge, 
has only been shown to hold for QCM A [ JKNN1 1 1. (Additionally, the number of proofs can be reduced 
to two, but this also follows from [HM10], where an essentially different argument was used.) 



5.6 QMA[fc] with Small Gap and Logarithmic-Length Proofs 

We also examine multi-prover QMA proof systems with small gap and where each proof consist of 
at most O(logra) qubits, in the hope that we can separate them from the ones that have poly(«)- 
length proofs. Unfortunately we were not able to do this in general, only in the case where the gap 
is inverse-exponential, which follows from a few simple observations. If the gap is smaller, say double- 
exponentially small or unbounded, then we give a lemma which simplifies the proof system by convert- 
ing it to one with single-qubit proofs without changing the order of magnitude of the gap. The details 
follow. 

Lemma 5.5. PP = QMA(0(log?i) , poly(n) ,c,s), where c(n) and s(n) can be calculated in 

0<.v<c<l, 

c _ iS >2-p°!y 

poly {n)-time on a classical computer. 

Proof sketch. The containment PP C (J o<.?<c<i, QMA(0(log«) , poly(Vz) ,c,s) is trivial since in PP the 

c-s>2-p o, y 

gap is always at least inverse-exponential. So we only need to prove the other direction. Consider the 
class QMA(0(log?i) , poly(«) ,c,s) for some c and s, for which the conditions in the lemma hold. Note 
that QMA(<9(log?i),poly00,c,s) C QCMA(cV), where c' - s' > 2-P°'y. (In fact they are equal.) The 
reason behind it is that for each proof there exists a unitary transformation that creates it, say, from 
|0). Since the unitaries are on O (log n) -many qubits, they can be described up to exponential precision 
by quantum circuits of size poly(?i). The QCM A verifier expects these descriptions as its proof. The 
completeness and soundness follows easilyj^] 

The above QCM A proof system can be converted to an MA proof system with exponentially small 
gap in the following way. The MA proof is the same as the QCM A proof. Once the proof is fixed the 
question is to estimate the acceptance probability of a poly-time quantum computation to exponential 
precision. This problem is in PQP, and since PQP = PPQwe have an MA proof system with the given 
parameters. This MA class is obviously in PP via the same argument as MA C PP for the normal-gap 
version of MA. □ 

Remark 5.6. Note that if we decrease the proof lengths to only 1 qubits then the resulting class is 
obviously still equals to PP. More formally 

PP= |J QMA(l,poly(n),c,j), 

0<.v<c<l, 

c-.v>2-p°'y 

where c{n) and s{n) can be calculated in poly(«)-time on a classical computer. 
This observation is generalized by the following lemma to any smaller gaps. 

Lemma 5.7. QMA(0(log«) , poly,c,s) C QMA(l,poly, 1 -2~ f • (1 -c) , 1 -2~' • (1 -s)), for some t 
such thatt(n) £ poly(«), and c and s are arbitrary functions ofn. 



6 For a detailed (but a bit different) proof of this fact see IGSU11I . 

7 PQP is the unbounded-gap version of BQP. For the exact definition of the class and the proof of the above equality see 
for example the survey by Watrous |Wat08|. 
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We present the proof of this lemma in Appendix [B] on page 19 Let us explicitly state here the 
previously mentioned corollary. 

Corollary 5.8. It holds that 

U QMA(0(logn),poly,c,s)= \J QMA(l,poly,c,j), 

0<s<c<l, 0<i<c<l, 



and 



c— s>2 c—s>2 



|J QMA(0(log«),poly,c,<s)= |J QMA(1, poly,c, < s). 

0<5<c<l 0<s<c<l 



Note that in Lemma 5. 7 the one-sided error property is preserved. So we also have for example 

QMA(<9(logrc),poly,l,< 1) = QMA(1, poly, 1, < 1). 

We don't know any better upper-bound for QMA(1, poly, c, 5) with c — s > 2~ 2P °' y then the trivial 
NEXP. It would be interesting to strengthen this bound or give some non-trivial lower-bound. We leave 
this question for future work. 

5.7 More Open Problems 

Here we list some more open problems that we think may be interesting to work on. 

• What is the power of QMA[&] and BellQMA[&] with unbounded gap? Can we at least show some 
upper-bounds? 

• What is the power of QMA^l, 1,1,1 -2~ 2PO ' y ) or QMA(1, 1, 1, < 1)? I.e., the proof system has 
only one qubit as its proof but we allow double-exponentially small or unbounded gap. Are they 
the same as PQP? Note that the known QMA(<9(log?i) , 1, |, 5) = BQP proofs MMW05HBSWTTH 
break down if the gap is so small. 
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A Proof of Soundness for Theorem 3.2 



This section proves soundness for verifier V described by Algorithm [T] on page[7J and hence finishes the 



proof of Theorem 3.2 The proof is done through a few lemmas. 

From now on let us suppose that Co ^ SUCCINCT3COL, and let's denote the state of Ri by and 
the state of R2 by |<p). These two states can be written in the form 

I ¥) = Z a; \i) t hi \j) , W) = Z °» 10 I AO \J) > 

,=0 ;=0 1=0 j=0 

? 1 1 2 / 

where £; \a t \ = £ ; \a-\ = 1 , and for all i, 1 J3,j | = £ ^ j8/ y - = 1 . 

The following lemma says that if the Equality Test succeeds with high probability then the distribu- 
tion of outcomes in the Consistency Test will be similar. This is analogous to Lemma 2.5 of [BT09]. 
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Lemma A.l. If the Equality test of Algorithm^succeeds with probability at least 1 — e, then for all k 

1 i— 



and I it holds that 



i 1 2 

Proof. Let ptj = | Okfii,j \ an dg,j = otj'jS/ ■ , and let us denote the probability vector with elements pij 
by p, and similarly for q. Then we have the following. 



\/l-\(W\<P)\ 2 = h\\W)(W\-\<P)(<P\\\Tr 



2 
1 „ 

>- 2 \\p 

1 



(2) 
(3) 



£ |a,-A-,;| -|«/Avl 



> 



\CCkPk 



KA 



for any A; and & Equations ([2]) and ([3]) are from the properties of the trace distance. Theorem |2 .9 1 implies 
that 5(l + |(y/"|<p)| 2 )>l — £. With the above derivation the claim of the lemma follows. 



□ 

Similarly to Lemma 2.6 of [BT09] (or Lemma 6.1 of BCF11ID . the next lemma states that vertices 
with high probability of being observed have a well-defined color. 



\\jf) and |<p) pass the Equality Test of Algorithm^and also line^hin the 
bility at least 1 - 1(T 10 • 4" n . Then for all ifor which |a,| 2 > 100^ • 2~ n , 
there exist one j for which \Pij\ 2 — 0.9. 



Lemma A.2. Suppose that 

Consistency Test with probability 

|2 



io- 



2 1 I 1 2 

Proof. Towards contradiction suppose that 3/ such that |a,-| > 1QQ 2 „ and Vj it holds that M3,j < 
Then without loss of generality we can say that |j6,-,o| 2 > ^ and |j6,m| 2 > 4 i- Since the probability that 
the Equality Test succeeds is at least 1 



l 



10 l0 -4' 



^ , we can apply Lemma A. 1 and get that 



KA 



< 



This implies that 



a: 



:;i 2 lA,'ir>i^i 2 iAMi 

1 



> 



V8_ 
10 5 -2"' 



10 5 • 2" 



2000-2" 10 5 -2"' 

Then the probability that in line [8] in the Consistency Test we get vi = va = i, c\ = and C2 = 1 is 



Pr [vi = i and c\ = 0] • Pr [v2 = i and C2 = 1] > 



1 



1 



vi_ 

2000-2" I 2000-2" 10 5 -2" 



> 



1 



10 10 -4"' 



This contradicts to the assumption that \y) and \q>) pass line [9] with probability at least 1 — 10 10 • 

4-". □ 

The next lemma is analogous to Lemma 2.7 of [BT09] and also to Lemma 6.2 of BCFllll . 

Lemma A.3. Suppose that \\jf} and |<p) pass the Equality Test of Algorithm^and also line^in the 
Consistency Test with probability at least 1 — 10~ 10 -4~". Then the probability of measuring on C\ in 
line 17 in the Uniformity Test is at least 0.05. 
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Proof. Suppose that we measure Ni in the standard basis. If the outcome is i then the probability of 
measuring on Q with the measurement of Definition 2.10 is 



i|ft, +Au+ft, 2 | 2 . 



For all i for which |a, | 2 > 1( J 2 „ Lemma A.2 applies, which means that there exist k[ such that |A,&,| 2 > 



jq . Let &i = f ki + 1 mod 3 and m, = f k, + 2 mod 3 ; then | jS,-^. | 2 + | A>,- 1 2 < to • We can lower bound the 
above probability by 

l \Pi, ki +PiA + Pi,m i \ 2 > l\\fr,ki\ ~ I ft A +A>,H 2 



>i |A- A .|- A /2-(|A- A | 2 + IA>, 12 



>'( 9 /2 ? 

~ 3 I 10 



> 100' 



where the second inequality follows from the Cauchy-Schwarz inequality. Or more precisely we have 

IA'A+A>,| 2 < 2 - (|Aa| 2 + IA>,| 2 ) < to < to < \Pi,kt\ 2 - The probability of measuring on Ci in 
linefTTlis 



2"-l i _ i 

£ I« ! -| 2 ---|A-.o+Am+A,2| 2 > £ |« ; -| 2 ---|A-,o+A,i+A,2 |2 

1=0 i for which 



"'I — 100 2" 



> Too" ^ 

(' for which 



'I — 100-2" 

2"-l 



>— 1 



100 V 100-2" 
5 

> Too' 

i 1 2 1 

where we used the fact that at most 2" — 1 nodes (i's) can have |a,-| < 10( j 2 „ . □ 

In order to proceed we need two lemmas, one from HBT09 1 and one from [CD 10]. We present them 
now, together with their proofs. 



Lemma A.4 (Lemma 2.8 of MBT09II ). Let us have a state |£) G C m , |£) = YlJLo Yi I*)- V there exist a 

2/17 ' 



£ rac/i that \ Yk\ 2 < J-, then the probability of getting 1 when we measure |§) with the measurement of 



Definition 



2.10 



is at least j^z- 



Proof. Let p and q be the probability distributions that arise when we measure |c;) and \u m ) in the 

2 

computational basis. Or in other words, let p be the probability vector with elements \Yi\ , and q be the 
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vector with all elements equal to -j-. Similarly to Lemma 

a 1 



A.l 



we have that 



1 - = - \\\u m ){u m \ - |§)(^||| Tr 

>\h~Ph 
1 m— 1 



2 J 



> 



i=0 



m 



m 



\n\' 



> 



Am 



Since the probability of getting 1 when we measure |£) with the measurement of Definition 2.10 
1 — | (u m | £ ) | , the statement of the lemma follows. 



The following argument appears in the proof of Lemma 3 of BCD 101 . which we state here as a 
separate lemma. 

Lemma A.5. Suppose that we have a bipartite quantum state \ \jf) £ </f <S> c €, with j¥ = C N and "rf = C c . 
We can write this state as 

N-l C-l 

lv} = E £ 

i=0 j=0 

where |a,-| = 1, and for all i, j3;j = 1. Suppose that the probability of measuring on ^ with 
the measurement of Definition 2.10\ is p, and after the measurement the resulting state on ,JV is 

2 

with Y,i\Yi\ =1- Then for all i it holds that 



|«/| 2 > p- \Yi\ 2 ■ 



Proof. Let qi denote the probability that if we measure the part of with the measurement of 
Definition 2.10 we get outcome 0, then if we measure the JV part in the standard basis, we get i. Note 
that for all i, 



On the other hand, 



<li=P-\Yi\ ■ 



0i = (¥ r l(|i)(i|®l«e>(«c|)l¥ r ) 



\ a i\ 

~c 

\(Xi\ 

~C 



c-i 
■ I hi 

|2 C-l 



\OC; 



where the inequality above follows from the Cauchy-Schwarz inequality. The above derivations imply 
the statement of the lemma. □ 
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Analogously to Lemma 2.9 of |BT09] (and to Lemma 6.3 of BCF11I0 . the following lemma says that 
if the states pass some of the tests with high probability, then it must be that all nodes appear with high 
enough probability. 

Lemma A.6. Suppose that \ \\r) and |<p) pass the Equality Test of Algorithm^ line^in the Consistency 
Test, and also the Uniformity Test with probability at least 1 — 10~ 10 •4 _ ". Then for all i, |a;| 2 > 
KXT 1 -2-". 



Proof. Because of Lemma [A3] the probability of measuring on Q in line 17 of Algorithm [T] is at least 



5 . Let the state of Ni be = Y^Lq 1 Yi |*)» a f ter we § ot on Q. Towards contradiction suppose that 



100 



1 2 1 S 

3/ such that |a,-| < in( ^ 2 „ . Since we got this measurement result with probability > j^,, Lemma 

the probability of getting 1 when measuring N i in line 



100-2' 
2 1 

implies that |y, |~ < jj^. From Lemma 



A.4 



A.5 
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is 



at least j^w- So the probability of failing the Uniformity Test is at least ^ • > 1Q io. 4 „ . This is a 
contradiction. □ 

The following lemma finishes the proof of soundness for verifier V. 

Lemma A.7 (Soundness). If Co SUCCINCT3COL then verifier V described by Algorithm^will reject 

with probability at least ^ . 

F y 3-10 10 -4" 

Proof. Assume that \\\f) and |<p) pass the Equality Test, the Uniformity Test, and line [9] of Algorithm [T] 
with probability at least 1 — 1Ql o 4 „ , as otherwise we are done. Let c(i) be equal to the j for which \Pij\ 
is maximal, or in other words, 

c{i) = argmax|j8/j| . 

j 

Because of Lemma A.6| and [AT2 this maximum is well defined. According to Lemma A.6 when measur- 



ing in line[8j the probability of obtaining (k,c(k)), for all k, is at least |a& 



2 



> ! JL > 

1 nn o» ia / 



10 — 100-2" 10 ^ 120-2" ' 



Similarly, from Lemma [A~T for all k the probability that we get (k,c(k)) when measuring \ cp) in line[8j 



is at least l2 o-2" ~ ^ 240-2" • Since the graph is not 3-colorable 3u,v £ V such that (u,v) £ E and 
c(u) = c(v). If in line|8]we get (u,c(u)) and (v,c(v)) then the Consistency Test will reject. This happens 
with probability at least 

1 1 1 

120 • 2" ' 240 • 2" > 10 10 -4»' 
Since the Consistency Test is chosen with probability ^, the statement of the lemma follows. □ 



B Proof of Lemma 5.7 



This section presents the proof of Lemma 5.7 from page 14 We will need the following previously 
known facts. 

Lemma B.l (See e.g., Chapter 4.5.2 of [NC00]). An arbitrary unitary operator on m qubits can be 
implemented using a circuit containing 0(m 2 4 m } single-qubit and CNOT gates. 

Lemma B.2. Any two-dimensional unitary operator U can be written in the form 

U = e ie R z (a)HR,( J 8)HR z ( 7 ), 

fora,p,Y,de [0,2tt). 



Proof. It is well-known that one can write any U as U = e l,? R z (a)R x (j8)Rj 
from the fact that R x (fi) = e l ^HR z (j3)H. 



The lemma follows 

□ 



^See e.g., Theorem 4.1 and Exercise 4.11 from INC001 . 
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The following definition and lemma are from |BK05], but we restate them in a different way, and 
include the proof for the sake of completeness. 

def 1 

Definition B.3. Define the 'magic' state \m m ) to be \m m ) = -j= (|0) +e lw |1)). 

Lemma B.4. There exists a constant size quantum circuit, made up o/H, CNOT and classical logical 
gates, such that on input \(p) and \m m ), it produces the state R z (©)|<p) with probability 1/2. (This 
probability is independent of\(p) and (0.) 

Proof. Let |<p) = a\0) +b |1) for some a,b G C, with \a\ 2 + \b\ 2 = 1. On input \m m ) (g> \ q>) the circuit 
performs the projective measurement defined by projectors 

Pi = |00)(00| + |11)(11|, P 2 = |01)(01| + |10>(10|. 

Note that 

Pi (\m a ) ®\q>)) = -r («|00) + e ! ^|ll)), and 
v2 

P 2 (\m m ) ®\<p)) = ±= (fe|01) +e lw a | 10)) . 

This means that both measurement outcomes happen with probability 1/2. If the outcome is 2, the 
circuit fails to create the state. However, if the measurement outcome is 1, then it performs a CNOT, 
which disentangles the second qubit, and gets the state 

a\0)+e lw b\l) =R z {(o)\(p). □ 

By combining the lemmas above we get the following corollary. 

Corollary B.5. Let U be any unitary operator on m qubits. There exist an algorithm A, using H, CNOT 
and classical logical gates, that takes as input the classical description of the circuit representing U 



(as in Lemma B.l and \B.2\ and the unentangled magic states (as in Lemma B.4), and produce the state 
U |0), with probability 2~°( m 4 ). Both the length of the input and the running time of A is O (m 2 4 m ). 

We are ready to prove Lemma [577] 



Proof of Lemma 5.7 Let L G QMA(£, k,c,s), where £ G 0(log?i) and k G poly(rc). (As usual, n is the 
length of the input.) Without loss of generality assume that all the proofs have length I. Let V be the 
corresponding verifier. We now construct a proof system that recognizes the same language L, and all 
the proofs are 1 qubit long. 

Denote the new verifier by W. For its proofs, W expects to get the circuit descriptions of k unitary 
operators Ui, . . . , U#, together with the corresponding unentangled 1 qubit magic states. Let us denote 
the number of magic states by t. Since each U; lives on £ qubits, the total number of bits and qubits W 



gets from the provers are at most O (k ■ £ 2 4 e ) G poly (n). W uses algorith A from Corollary B.5 k times, 
to get the states Ui |0), . . . , |0). If in any of these k cases A fails then W accepts. Otherwise W runs 
V on Ui |0) (8) • • • ® |0) and accepts if and only if V accepts. The running time of W is obviously 
polynomial. Let us denote the probability of acceptance of V on input Ui |0) (8) • • • <8> |0) by p. There 
are two cases for W. 

• With probability 1 — 2~' one of the runs of algorithm A fails and W accepts. 

• With probability 2~' all the As succeed. In this case W obtains the state Ui |0) ® • • • ® |0). 
Given this state as input to V, it accepts with probability p. 
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The overall probability with which W accepts is 



l-2 -r +2-'p = l-2 -t (l-p). 

We are left to argue about completeness and soundness. For the completeness assume that there exist 
states | <pi ), . . . , | (pk) , with which V accepts with probability at least c. Then there exists unitary operators 
Uj, . . . , U' k such that |<p ; -) = U- 10) for i 6 {1,2, ... ,1c}. The honest provers of W can give the descriptions 
of these unitaries together with the corresponding magic states, so the completeness parameter follows. 
For the soundness assume that for all states |<pi), . . . , \(pk), V accepts with probability at most s. Then 
even if W gets arbitrary circuit descriptions and magic states, they correspond to some unitaries when 
all the runs of A succeed. So the soundness follows similarly to the completeness. □ 
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